$20M Drained from Crypto Hacks This Week: DeFi Component Vulnerabilities Exposed

This week, hackers drained $20 million from various cryptocurrency wallets and platforms. The incidents were diverse in nature, involving Safe wallet strategy modules, mobile application wallets, decentralized finance (DeFi) money market oracles, flash loan yield vaults, and bridge signing keys.

The largest single loss occurred when an attacker exploited a helper Multicall contract and a custom Safe module authorized by the owner of a Gnosis Safe wallet on Ethereum. The hacker used this access to drain $7.8 million worth of rsETH from the wallet.

Another significant incident involved Nostra Finance's money market, which was manipulated through an oracle price increase. This allowed a single account to borrow approximately $3.5 million in assets from the platform.